Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: yeDeYyPnY3NHgeIyDO6kB+kHYaTu1K4YYT4D9V4kP7g=
Subject key identifier: 05:E3:3F:4F:FB:40:BE:12:B4:87:D2:F2:B8:55:CB:2B:3E:2F:B3:DA
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 019769CEB1E4276F5996E4668B7802295F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 0561
Signing time: Fri 13 Jun 2025 15:00:42 +0000
Manifest this update: Fri 13 Jun 2025 15:00:42 +0000
Manifest next update: Sat 14 Jun 2025 15:00:42 +0000
Files and hashes: 1: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: uAODscOD3xRqqihbhWQDi2zkem742A+XedZNZP5+ruI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b1:e4:27:6f:59:96:e4:66:8b:78:02:29:5f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Jun 13 15:00:42 2025 GMT
Not After : Jun 14 15:00:42 2025 GMT
Subject: CN=05e33f4ffb40be12b487d2f2b855cb2b3e2fb3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:18:8f:74:cb:69:b3:4e:6a:a7:4b:f5:46:
76:c7:99:33:ce:d6:2f:a6:b1:51:11:c6:08:37:46:
2c:7a:98:8e:73:ec:30:49:24:e0:e1:a2:fc:02:f0:
85:a2:ad:c0:96:1e:93:5a:48:5b:03:49:dc:48:a6:
f6:42:87:d7:06:d7:94:a7:a6:09:84:98:41:61:69:
9f:60:ae:27:d6:5f:0a:81:01:ab:30:22:76:32:96:
4c:f8:85:51:b0:61:04:32:66:f0:ff:bc:b6:c0:e7:
ec:25:aa:a0:15:30:ae:43:2d:7f:23:5e:d7:a1:07:
6f:f0:ac:c2:3f:19:47:c7:53:87:69:65:dd:95:de:
6b:32:f0:a1:12:51:d0:54:26:5f:54:f0:5c:77:12:
91:90:f5:ca:19:44:79:74:96:63:f6:7d:63:c5:06:
b3:34:71:56:54:a3:ca:47:57:32:e2:27:fc:7a:ce:
1d:9d:28:82:2c:5f:7f:c4:37:ab:fe:c0:4c:5a:b4:
78:d6:20:ba:cc:bb:4c:ac:0b:6c:9a:d0:f5:ce:f1:
0e:e4:cd:06:46:1b:0e:fc:a5:5c:f9:80:fd:f0:88:
13:60:e7:66:82:07:a7:b7:21:fd:ae:5c:e9:83:82:
d9:9d:94:34:0c:3f:5a:e7:08:cc:8e:bc:ad:68:a6:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:3F:4F:FB:40:BE:12:B4:87:D2:F2:B8:55:CB:2B:3E:2F:B3:DA
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:c3:2b:b8:63:71:b7:5b:75:b4:3c:f8:24:ee:04:f7:97:
1b:8f:73:c0:7d:ca:bf:b2:18:b0:bd:30:04:51:56:5b:c8:f3:
f2:25:04:96:7e:a4:53:ad:8b:03:b4:46:17:bb:6c:2f:86:34:
92:17:38:fb:d9:6d:02:e6:23:d3:f3:69:55:89:73:e9:20:b4:
39:4c:4f:3d:3c:8c:c9:7a:08:90:9f:c7:04:ed:ef:9a:47:d1:
46:0c:76:d9:0c:e7:a4:43:3e:9b:a2:5a:3f:b3:98:d6:6b:b6:
a4:db:25:9d:48:65:21:0d:22:c1:df:a4:80:20:4e:d3:50:f8:
d0:ce:f3:f5:13:c6:75:2e:c8:e2:ef:0c:87:ee:fd:9e:2d:14:
b9:8a:00:36:0e:2f:f2:44:f6:51:2c:02:bb:9b:2d:86:28:b5:
4a:3b:0e:08:84:37:2c:4d:5b:d7:24:b3:48:18:c0:b9:61:84:
4c:8a:12:b4:6e:c0:9f:1d:85:dd:27:82:7a:3f:ee:d1:8b:6c:
f1:45:e1:fa:c0:6b:90:7f:17:5e:b8:21:92:e1:2b:70:2f:c6:
f2:19:95:16:6a:60:9c:76:fb:b4:2a:93:1e:4d:3a:d9:e0:41:
2a:9f:1c:af:71:fa:da:6e:35:42:15:ea:b7:f2:3d:35:d6:ff:
60:1b:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:26 2025 by rpki-client